Could you show a regulator you meet GDPR?

Most GDPR problems in smaller organisations are not exotic. They are a missing record of processing, files kept forever, an access request nobody knows how to answer, or no plan for a leak.

This check asks about those things in plain language, alongside the security measures GDPR expects, and tells you which answers are obligations under the law that applies to you.